Ariento User License Types*
Last Updated January 1, 2024
ARCHIVE ONLY User
For revoked/terminated users that the organization wants to maintain their data.
Device Support Included:
None
Capabilities:
Archiving of emails, OneDrive and computer/endpoint backup for that user.
Limitations:
N/A
Examples:
Users that have left the organization but access/retention to their data is required.
Login Only User
For external vendors/contractors that do not need an email, but require access to company owned systems.
Device Support Included:
None
Capabilities:
Login to organizationally owned SaaS systems tied to single sign on (SSO)
Limitations:
No organizational email
Only for SaaS access, no organizational computer access
Examples:
Contractors, Consultants, Board Members, Vendors
Users that don’t have an organizational email address, and require access to SaaS system(s) tied to SSO from unmanaged/unsupported devices
Email Only User*
Best practice is for every employee to have an email address. Email only users require an email account for things like payroll and basic communication, but do not require access to organizational systems or information outside of email.
Device Support Included:
None
Capabilities:
Send and receive email via web browser or mobile device
Limitations:
Unable to access work data and resources outside of email
No Microsoft Teams, OneDrive or SharePoint access
Examples:
Front Line Workers
Users that don’t require access to organizational systems or information outside of email
Users that don’t have data retention needs as email is not backed up
*Email only users does not include shared mailboxes or distribution lists, as long as they are unlicensed. A minimum of one email only license is required per Client for a scan to email account. Please note that mailboxes, such as shared mailboxes and groups are not backed up unless they are licensed as an email only user.
LITE User (Mobile and/or WEB BROWSER Only)
Lite Users access organizational data and systems via a web browser or mobile device such as a tablet or smart phone. They are able to login to shared workstation(s) managed by Ariento (and assigned to a separate Standard or Premium User). Lite users are NOT permitted to be a primary user assigned to a computer.
Device Support Included (must meet Ariento’s minimum specifications):
Up to (2) Mobile Devices (Smart Phone/Tablets)
Web browser support on shared computer/workstation(s) managed by Ariento (and assigned to a separate Standard or Premium User)
Capabilities:
Use mobile apps downloaded from Apple or Google Play stores
Complete tasks such as email and data entry on a mobile device or web browser
Edit files using mobile applications or web browser using Microsoft Office
Access websites via a web browser on organizationally approved mobile device or shared workstation
M365 Emails and OneDrive are backed up
Login to a workstation assigned to a separate primary Standard or Premium User
Use web and/or mobile applications of Outlook, Excel, Word, PowerPoint, etc.
Limitations:
No desktop computer or desktop application support
Unable to access work data & resources outside of web browser and/or mobile applications on organizationally approved mobile device or shared workstation
Backup is limited to Microsoft 365 email and OneDrive (no endpoint backup)
Unable to download files or work data locally outside of web browser on a computer
Unable to use desktop versions of Outlook, Excel, Word, PowerPoint, etc.
Examples:
Contractors, Consultants, Board Members, Front Line Workers
Users that need access to other systems besides email, but work exclusively off of tablets or smart phones
Part-time user that shares computer with another user (at least one shared user must be a standard or premium user)
User with exception/risk sign off to primarily work from workstation not managed/supported by Ariento (i.e. contractor, employee that works on client/government secured computer)
Users that require computer access for web-based (browser) tasks only
Standard User
Standard Users access organizational data primarily via an organizationally issued workstation (computer) and personally owned smart phone.
Device Support Included (must meet Ariento’s minimum specifications):
Up to (2) Mobile Devices (Smart Phone/Tablets)
Up to (1) Computers/Workstations
Capabilities:
Everything that a Lite User can do
Download and save files locally on their computer
Edit files locally using desktop installed applications
Use desktop versions of Outlook, Excel, Word, PowerPoint, etc.
Computer files are backed up
Limitations:
Unable to download files or work data to non-work computers (i.e. BYOD)
Unable to print work data on non-work computers (i.e. BYOD)
Examples:
Users who are issued a dedicated company owned computer and use a smart phone
Premium User
Premium Users have additional support and/or licensing needs.
Device Support Included (must meet Ariento’s minimum specifications):
Up to (3) Mobile Devices (Smart Phone/Tablets)
Up to (3) Computers/Workstations
Capabilities:
Everything that a Lite & Standard user can do
Limitations:
Unable to download files or work data to non-work computers (i.e. BYOD)
Examples:
Users with multiple computers (to include if limited support is required for personal computers setup to access company data or resources)
Users that require local administrator access to their endpoints such as developers, engineers or IT personnel
User with multiple user accounts such as admins or separate domain email only accounts
Users that have a Mac or Linux workstation
Users with multiple exceptions/risk sign offs
Users with endpoints that don’t meet minimum supported requirements but are NOT end of life
Users that require a higher level of service and faster response times such as executives, VIPs, etc.
Users with approval or authorization permissions (i.e. account manager, software approver, exception approver, onboarding representative, etc.)
Server
Windows Server OS either on premise or hosted on infrastructure as a service (IaaS) such as Azure. Counted by operating system regardless if virtualized or dedicated hardware.
Examples:
Shared File Drive
Application Server such as accounting system or CRM
Operational Technology (i.e. CNC Machine) with non compatible Operating System and can’t be joined/managed by M365 Endpoint Manager
Server - Limited
Non Windows Server OS that can be joined/managed by M365 Endpoint Manager either on premise or hosted on infrastructure as a service (IaaS) such as Azure. Counted by operating system regardless if virtualized or dedicated hardware.
Capabilities:
Shared server or OT machine that provides service to end users (i.e. licensing)
Limitations:
Must be non Windows Server OS that can be joined/managed by M365 Endpoint Manager (i.e. Windows 10/11)
Examples:
Licensing server for software (i.e. PDM)
Operational Technology (i.e. CNC Machine) with compatible Windows Operating System (Windows IoT Enterprise, Windows 10 Professional, Windows 10 Enterprise)
Cloud Admin USER
Users that require cloud (backend) administrator access beyond read only to Ariento’s technology stack or an Ariento managed cloud service add on. Does not include Ariento admins.
Device Support Included:
None
Capabilities:
Ability to login to backend admin portals owned and/or managed by Ariento and conduct actions more than read only.
Limitations:
Dependent on level of permissions granted.
Examples:
Users that need to conduct eDiscovery searches in lieu of Ariento.
Users that need to query logs in Ariento’s central repository.
Users that need capability to manage client network.
Users that have local admin access to all of an organizations computers.
*All user license types represent an annual commitment unless otherwise specified in contract.